Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
File:                     TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json)
Hash identifier:          XtLc2lJEJ/dGnjH+niJyOYhTro8i8JhhjwZHKg8hdr8=
Subject key identifier:   69:C8:B6:0C:8F:CC:7D:00:33:D6:BD:E7:B5:89:E5:4B:56:F3:9F:42
Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
Certificate issuer:       /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Certificate serial:       019CA97D0D32C9B34FA47884E5DF44EB9BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
Manifest number:          0BB9
Signing time:             Sun 01 Mar 2026 13:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:10 +0000
Files and hashes:         1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: YAdjYLs99oMnOYSN46E11a/cuqquLSEeTCtws3/Ej1g=)
                          2: uhEEKQpm0Q9TvpFR2U11BjNqxM8.roa (hash: Dq7YREG0s4cS8g2gjkqTRWbO1QsL7h+aN90fU6Kia14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:0d:32:c9:b3:4f:a4:78:84:e5:df:44:eb:9b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
        Validity
            Not Before: Mar  1 13:01:10 2026 GMT
            Not After : Mar  2 13:01:10 2026 GMT
        Subject: CN=69c8b60c8fcc7d0033d6bde7b589e54b56f39f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:5e:93:16:55:47:c0:0b:84:06:03:e4:2a:
                    36:74:a4:10:61:7b:e0:6a:e5:58:fd:68:b8:b0:3d:
                    50:bd:47:96:60:0c:24:08:0c:79:35:91:53:5a:ff:
                    d4:fb:df:ea:97:ab:4e:e8:bd:c5:61:68:47:11:a4:
                    de:8c:e6:9a:31:23:7c:1d:5a:1d:a1:b4:a7:d0:92:
                    cb:eb:b8:63:4d:e7:c2:2e:8e:31:d4:a3:5b:74:98:
                    1e:5d:77:9c:6d:09:cd:2f:26:0b:31:5f:0f:ea:bc:
                    8a:7f:22:e3:d9:0b:aa:27:13:bf:56:5a:80:42:96:
                    dc:f4:cc:c0:dd:93:36:bd:05:14:5a:0e:66:05:68:
                    25:28:37:ff:72:60:b2:6b:70:6b:3e:75:c5:85:a3:
                    a1:31:3a:e2:10:df:71:35:2c:06:7b:d6:3e:5c:fd:
                    36:58:f3:64:f9:fd:91:d9:a2:bf:ec:7b:23:de:22:
                    5e:f6:2c:d2:5b:71:b4:23:cb:84:3b:2b:55:c2:65:
                    9c:85:4d:7e:d1:2b:66:0c:3e:39:77:dc:8a:37:3b:
                    bd:07:21:a3:93:e5:88:ce:0e:ae:00:ac:a5:d5:1e:
                    54:fb:e6:61:80:c1:1f:6c:25:b4:05:7a:16:de:12:
                    6c:90:0a:d8:1c:81:b2:c3:65:e3:05:7f:7c:c8:47:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:B6:0C:8F:CC:7D:00:33:D6:BD:E7:B5:89:E5:4B:56:F3:9F:42
            X509v3 Authority Key Identifier:
                keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:58:b9:cc:c2:89:e7:fe:52:f9:e3:c5:5d:62:44:79:60:
         f5:3e:03:04:96:be:b8:8d:a4:9b:2e:0e:28:55:79:ab:9a:a7:
         2d:73:57:16:73:57:79:c1:81:49:9a:bb:2e:21:8d:bf:b2:17:
         00:a6:18:f4:1d:10:7c:1f:28:1e:d4:4c:d3:90:1b:5d:e4:9b:
         c6:83:3a:9c:0f:bf:31:b8:ae:01:52:88:f0:bb:13:de:23:33:
         7f:50:4f:b7:2f:58:fd:61:f6:47:67:7f:ac:35:a8:73:b9:53:
         51:51:5d:61:5b:8b:1e:4d:7c:8b:bc:df:9a:84:2c:5b:4b:f4:
         b7:86:f2:68:93:81:4a:41:f9:8e:71:7e:96:fe:34:b0:3e:c4:
         ef:54:a4:ed:b4:cb:3e:91:69:fb:fa:fe:bd:5a:54:da:12:d6:
         2f:2d:5c:7d:24:f3:5c:7d:05:aa:93:a9:51:cc:b7:d1:94:8a:
         06:d1:f1:f4:f4:ee:b9:aa:d7:9c:72:f8:8b:2a:99:3e:fa:56:
         ca:46:fb:24:0e:e2:e0:25:a2:65:7f:63:5c:f8:cd:17:ae:b8:
         e3:54:8e:fe:d7:62:8e:72:71:07:e0:30:7f:f5:ce:49:db:05:
         35:60:62:28:9f:69:ac:fc:89:b0:6c:d9:df:6c:9a:bc:37:38:
         c3:34:19:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfQ0yybNPpHiE5d9E65vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzQ3NTBiZTIxNzNjYjliMDg2YTc3YzZkZWE1NGI0YTg0
NjlhZjMwHhcNMjYwMzAxMTMwMTEwWhcNMjYwMzAyMTMwMTEwWjAzMTEwLwYDVQQD
Eyg2OWM4YjYwYzhmY2M3ZDAwMzNkNmJkZTdiNTg5ZTU0YjU2ZjM5ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4dekxZVR8ALhAYD5Co2dKQQYXvg
auVY/Wi4sD1QvUeWYAwkCAx5NZFTWv/U+9/ql6tO6L3FYWhHEaTejOaaMSN8HVod
obSn0JLL67hjTefCLo4x1KNbdJgeXXecbQnNLyYLMV8P6ryKfyLj2QuqJxO/VlqA
Qpbc9MzA3ZM2vQUUWg5mBWglKDf/cmCya3BrPnXFhaOhMTriEN9xNSwGe9Y+XP02
WPNk+f2R2aK/7Hsj3iJe9izSW3G0I8uEOytVwmWchU1+0StmDD45d9yKNzu9ByGj
k+WIzg6uAKyl1R5U++ZhgMEfbCW0BXoW3hJskArYHIGyw2XjBX98yEf7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnItgyPzH0AM9a957WJ5UtW859CMB8GA1UdIwQY
MBaAFE00dQviFzy5sIanfG3qVLSoRprzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUt
ZThiMDExZWE4ODk3LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUtZThiMDExZWE4ODk3
LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXylYuczC
ief+UvnjxV1iRHlg9T4DBJa+uI2kmy4OKFV5q5qnLXNXFnNXecGBSZq7LiGNv7IX
AKYY9B0QfB8oHtRM05AbXeSbxoM6nA+/MbiuAVKI8LsT3iMzf1BPty9Y/WH2R2d/
rDWoc7lTUVFdYVuLHk18i7zfmoQsW0v0t4byaJOBSkH5jnF+lv40sD7E71Sk7bTL
PpFp+/r+vVpU2hLWLy1cfSTzXH0FqpOpUcy30ZSKBtHx9PTuuarXnHL4iyqZPvpW
ykb7JA7i4CWiZX9jXPjNF66441SO/tdijnJxB+Awf/XOSdsFNWBiKJ9prPyJsGzZ
32yavDc4wzQZaw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:29 2026 by rpki-client